Privacy Policy

AgentFit is operated by AgentFit Technologies Ltd., 2nd Floor, Chancery Court, East Mall Drive, Freeport, Grand Bahama, The Bahamas. We are the data controller for the information described here.

AgentFit is an AI fitness coaching app. It builds and adapts workout plans from how you train, recover, eat, and what equipment you have. The website also collects waitlist sign-ups before you create an app account.

AgentFit is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Its coaching output is generated by AI and is not medical advice. Consult a healthcare professional before starting or changing a training, nutrition, or medication regimen.

Questions, requests, or complaints: privacy@agentfit.io.

Waitlist (website). Name, email address, and fitness preferences you submit on agentfit.io. We use this to manage waitlist position and send launch updates. We do not collect health-platform data on the waitlist.

App account. When you sign in with Google or Apple we receive the identifier and email those providers send us so we can create and recognise your account. We never receive your Google or Apple password.

Profile and training. Information you enter in the app, such as goals, equipment, training locations, workout logs, and nutrition.

Health notes you type (no OS permission). These never come from Apple Health or Health Connect:

• Medical notes, additional notes, and listed injuries on your profile
• Medication and supplement change history (started, stopped, or dose changed). This is stored so we do not misread training or nutrition patterns. AgentFit does not give medication advice.
• Bowel / GI events, including stool type, urgency, pain, straining, incomplete evacuation, nocturnal occurrence, and a visible-blood flag, used for gut-related training and nutrition rules

Communications. If you email us, we keep what you send so we can reply.

Only if you grant permission in the OS. You can refuse or revoke access at any time in Apple Health, Health Connect, or AgentFit Settings → Health. Refusing does not stop the rest of the app from working.

Apple Health (iOS) — we read: heart rate, heart-rate variability (SDNN), resting heart rate, steps, active energy, sleep analysis, body mass, height, body-mass index, body-fat percentage, lean body mass, and VO₂ max. We also read workouts logged by other apps so they can appear in AgentFit, and we may write completed AgentFit workouts back to Apple Health.

Health Connect (Android) — we read: heart rate, heart-rate variability, resting heart rate, steps, active calories burned, sleep sessions, weight, height, body fat, lean body mass, VO₂ max, and exercise sessions from other apps. We write only a completed AgentFit workout (start, end, title). We do not write energy or heart-rate values, and we do not request menstrual or body-mass-index data on Android.

Health data that Apple Health or Health Connect holds on your device belongs to those platforms. Removing AgentFit's access, or deleting your AgentFit account, does not delete data stored there — manage that in the OS settings.

Photos

Some features work from a picture you choose to take or upload:

• Meal and menu photos — to estimate what you ate or to read a restaurant menu
• Gym equipment photos — to detect available equipment so workouts match your gym
• Photos you attach in coach chat

Taking or selecting a photo requires your camera or photo-library permission, which the OS asks for and you can revoke at any time. The photo is sent to an AI model for analysis as described in section 6, and we do not store the image — only the result (for example the detected equipment list or the estimated nutrition) is saved to your account. We do not use your photos for advertising or to train AI models, and we do not run facial recognition.

Voice

You can talk to the coach instead of typing, and you can log sets by voice during a workout. This only happens while you are actively using a voice feature — the app does not listen in the background, and there is no wake word.

Using it requires your microphone permission, which the OS asks for and you can revoke at any time. Voice input is optional; every voice feature has a typing equivalent.

We keep the resulting text, which becomes part of your coach conversation and is used as described in section 6. We do not store the audio recording. We do not use your voice for advertising, for voice identification, or to build a voiceprint.

ElevenLabs also generates the spoken coaching cues you hear. That is a separate function and involves no recording of you.

Device and account settings. Timezone, preferred language, unit system, and a push-notification token.

Location. If you allow it, we use location while the app is in use to detect which gym or training location you are at, so equipment-aware workouts can adapt. Telling one gym from another needs a reasonably exact reading, so this counts as precise location: the app rounds the coordinate to about 11 metres before it leaves your device, and stores nothing finer. We keep only what identifies a training location — never a movement history or a trail of where you have been. We do not use location in the background, and we do not build an advertising profile from it.

Diagnostics and app usage. We collect crash and performance data so we can fix bugs, along with basic records of which features you used and when, so we can tell what is working. That may include a user id and email so we can find a broken session. We do not use any of it for advertising, and we do not sell it.

This section is the one to read if you read only one.

What the coach uses. The in-app coach draws on your account context — workout plans and history, chat, biometric summaries derived from the health data in section 3, nutrition, injuries, the medical and medication notes you typed, GI events, and any photo you attach — to generate replies and plan changes.

• providers are not permitted to retain your data or use it to train their models, and
• requests are served from data centres in North America (see section 8).

We ask your permission first. Because this involves health information, the app asks for your explicit consent before any health or medical context is sent to an AI provider, and records that you gave it. You can withdraw consent at any time in AgentFit Settings; the coach then runs without your health context.

Human review. We may read individual coach conversations to investigate a bug or a quality complaint. Access is limited to the people who need it.

Automated decisions. Plans, targets, and recovery adjustments are generated automatically. They are recommendations — you can accept, change, or ignore any of them, and no automated decision here has a legal effect on you. If you want a human to look at something the coach did, email us.

Please do not put information in chat or notes that you would not want processed for coaching.

We do not sell personal information, and we do not share it with advertising networks or data brokers. We share it with the service providers below, who process it on our instructions under contract, and who are required to protect it to the standard set out in this policy:

We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of users or AgentFit. If AgentFit is involved in a merger or acquisition, we will tell you before your information moves to a new controller.

AgentFit Technologies Ltd. is established in The Bahamas. Your data is processed as follows:

• Application and database — hosted by Render in the United States.
• AI coaching — coach requests are routed by OpenRouter to model providers serving from North America. We restrict routing to that region rather than letting requests go to whichever provider is cheapest worldwide.
• Voice — while a voice feature is active, audio is streamed to ElevenLabs in the United States for transcription (section 4).
• Diagnostics — Sentry and LangSmith process data in the United States.
• Email — Resend processes data in the United States.

This means that if you use AgentFit from outside the United States, your information — including health information — is transferred to and processed in the United States, and is subject to the laws there.

We do not currently offer regional data residency. If that changes, we will update this page.

For users in the UK, EEA, and Switzerland, our legal bases under the GDPR are:

Withdrawing consent does not affect processing that already happened, and does not delete data you can still delete yourself under section 11.

Wherever you live, you can email privacy@agentfit.io to:

• Access a copy of the information we hold about you
• Correct anything inaccurate
• Delete your account and its data (section 11)
• Export your data in a portable format
• Withdraw consent for health processing or AI coaching
• Object to or restrict processing based on legitimate interests
• Opt out of product-update email (every email has an unsubscribe link)

We respond within 30 days. We will ask you to verify that you control the account before we act on a request, and we do not charge for it or treat you differently for making one.

If you are in the UK, EEA, or Switzerland you also have the right to complain to your local data protection authority. If you are in The Bahamas you may complain to the Data Protection Commissioner.

In the app: revoke Apple Health or Health Connect access in the OS at any time, turn off workout write-back in AgentFit Settings → Health, and turn off AI health processing in AgentFit Settings.

In the app: More → Settings → Delete account. Type DELETE. That erases the account and the data associated with it: training history, plans, saved workouts, biometrics, nutrition, health notes, GI and medication logs, chat, consent records, and push tokens. Signing in again with the same Google or Apple account starts empty.

Without the app: request deletion at agentfit.io/account-delete, or email privacy@agentfit.io from the address on the account. We will delete the account after we verify ownership.

Deleting specific data instead of the whole account: email privacy@agentfit.io and tell us what you want removed — for example your GI log, your medication history, or your chat history — and we will delete that without closing your account.

Health data that remains in Apple Health or Health Connect on your device is managed in those OS settings, not by deleting the AgentFit account.

• Account data — kept while your account exists, then deleted as described in section 11.
• Diagnostic traces and crash reports — kept for up to 90 days.
• Waitlist records — kept until you ask us to delete them or the waitlist is wound down.
• Email correspondence — kept up to 24 months so we can follow up on an earlier conversation.
• Records we are legally required to keep — kept for the required period, then deleted.

We protect your information with:

• Encryption in transit — all traffic between the app, our servers, and our providers uses TLS/HTTPS.
• Encryption at rest — the production database and its backups are encrypted on disk.
• Access control — production access is limited to the people who need it, with individual accounts and multi-factor authentication.
• Least-privilege health scopes — we request only the health data types listed in section 3 and no others.
• Minimised diagnostics — free-text medical notes, medication history, GI events, and photos are masked out of diagnostic traces.
• Contractual protection — every provider in section 7 is under a data processing agreement that bars using your data for their own purposes.
• Breach notification — if a breach affects your personal data and is likely to put you at risk, we will notify you and the relevant regulators without undue delay, and within 72 hours where the GDPR requires it.

No system is perfectly secure, and we cannot guarantee absolute security. If you believe your account has been compromised, email privacy@agentfit.io.

Categories we collect. Identifiers (name, email, account id); commercial information (subscription status); internet or network activity (crash and performance diagnostics); geolocation (approximate training location); and sensitive personal information — namely health information, precise-adjacent geolocation, and account log-in credentials from Google or Apple sign-in.

Why we collect it. To provide, personalise, and secure the app, as described in sections 5 through 7.

Sources. You, your device, the Apple Health and Health Connect platforms with your permission, and Google or Apple when you sign in.

Sensitive personal information. We use it only to provide the service you asked for and to keep it secure — never to infer characteristics about you, and never for advertising. Because our use falls within the CCPA's permitted purposes, the right to limit use of sensitive personal information does not restrict anything we do; you can nonetheless withdraw health-processing consent at any time under section 10, which stops it entirely.

Your rights. To know, access, correct, delete, and obtain a portable copy of your personal information; to opt out of sale or sharing (we do neither); to limit use of sensitive personal information; and not to be retaliated against for exercising any of these. Exercise them via section 10 — we do not charge for a request and do not degrade your service because you made one. An authorised agent may submit a request on your behalf with written proof of authorisation.

AgentFit is not directed at children. You must be 16 or older to create an account, and we do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, email privacy@agentfit.io and we will delete it.

If we change what we collect, who we share it with, or where it is processed, we will update this page and the version and date at the top. For a material change — a new category of data, a new class of recipient, or a new processing location — we will notify you in the app and, where the law requires it, ask for your consent again before the change applies to you.